Detections
Analytics

Catalina - Disable Password Sharing

Information

Password Sharing _MUST_ be disabled.

The default behavior of macOS is to allow users to share a password over Airdrop between other macOS and iOS devices. This feature _MUST_ be disabled to prevent passwords from being shared.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.applicationaccess:
 allowPasswordSharing:
 False

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5, CCE|CCE-84776-4

Plugin: Unix

Control ID: 4f2b1538b3adb1ed1d9fae23ce92a309a6f39a5cc74dc73e06be49849ce639da